ACSAC CWID 2007 Data Diode Case Study. toll free
|
|
|
- Griselda Knight
- 10 years ago
- Views:
Transcription
1 ACSAC CWID 2007 Data Diode Case Study toll free
2 Coalition Warrior Interoperability Demonstration (CWID) 2007 Case Studies in Data Diode Application toll free
3 Scope of Presentation Coalition Warrior Interoperability Demonstration (CWID) Case Study: CWID07 Trial 3.27, IIMS Dahlgren Naval Base (Virginia), USA Emergency Response, Command & Control One-way data transfer systems as core service Case Study: CWID07 Trial 1.56, DualDiode Shirleys Bay (Ottawa), Canada Intelligence Data Fusion, Streaming Video Case Study: Virtual Trial Enterprise Data Diode Deployment Summary 3
4 Coalition Warrior Interoperability Demonstration (CWID) what is it? Global international exercise in info sharing Government Government Military Intelligence Military Civil Emergency Response Communications technology demonstration with formal assessment 4
5 What happens during CWID Trials? Simulated natural disasters Earthquake, hurricane, disease pandemic Simulated man-made disasters War, terrorism, environmental disaster Information flows between networks 5
6 Who participates in CWID? Governments US, Canada, UK, Australia, NZ, NATO Military, Intel, Civil Protection Agencies Commercial Defense Contractors (Cross Domain Solution Providers) 6
7 CWID 2007 Dataflow through Owl Equipment 7
8 CWID 2007 Timeline Initial Planning Conference Nov, 2006 Mid Planning Conference 19 Jan 2 Feb, 2007 Final Planning Conference, Mar, 2007 Training for Role Players 4-8 Jun, 2007 Execution Jun,
9 Case Study 1 CWID 2007 Trial 3.27, IIMS, Dahlgren VA Integrated Information Management System Enhance preparedness for natural or man-made threats to homeland security. Early detection of threat or attack biological, chemical, radiological Coordinate response to emergency or attack local, state, federal organizations Sponsor: USAF, developer: US Army 9
10 Sensor array monitors atmospheric environment of metro area in real-time Major Metropolitan Area 10
11 Sensor array provides early warning of toxic event First Sensor Alert Major Metropolitan Area Toxic Explosion 11
12 Sensor array provides event status in real-time Advancing Toxic Plume Major Metropolitan Area Toxic Explosion 12
13 CWID 2007 Trial 3.27 IIMS Architecture Details Unclass Network Secret Network 13
14 CWID 2007 Trial 3.27 IIMS Architecture Details Unclass Network Secret Network 14
15 CWID Trial 3.27 IIMS, Simplified Multi-Network Architecture includes Unclassified and Secret Networks, and Cross Domain Solutions Secret Network: Surveillance, Analysis, Command, Control Sensor Data, Field Reports, Imagery, Event Detection Malware Scan DualDiode DualDiode Content Scan Declass Tool Filtered Reports, Emergency Response, Situational Awareness, Operational Guidance Unclassified Network 15
16 CWID Trial 3.27 IIMS, Simplified Optional Military Surveillance Adds to Operational Picture Secret Network: Surveillance, Analysis, Command, Control Sensor Data, Field Reports, Imagery, Event Detection Malware Scan DualDiode DualDiode Content Scan Declass Tool Filtered Reports, Emergency Response, Situational Awareness, Operational Guidance Unclassified Network 16
17 IIMS exchanges alerts with a civilian mobile Emergency Operation Center (EOC). EOC shares alerts with Federal, State, Local agencies through Open Platform Emergency Networks (OPEN). The EOC is provided by Rapid Response Institute of Monmouth University. The EOC also known as Joint Mobile Command and Training Center. 17
18 Emergency Operation Center (EOC) info processing focuses on Geospatial situational awareness. 18
19 CWID Trial 3.27 IIMS - General Description Accumulate sensor data on low security networks. One-way Transfer data from low to high security networks for analysis, event detection. military surveillance data on secure network enhances situational awareness. One-way Transfer alerts, reports, directives from secure network to civilian networks for joint response. 19
20 Data Diode as Core Service Data flow is separated into two one-way transfer paths subject to different security protocols. Data flow from Unclass to Secret (low to high) requires malware scan before transfer. Data flow from Secret to Unclass (high to low) requires human-review, content scan before transfer. 20
21 Data Diode Justification Why hardware-enforced one-way transfer? cannot be probed or hacked with software rigorous protocol break across domains From low to high, data transfer policy compliant with established data security models From high to low, data transfer always initiated (pushed) from trusted source. 21
22 DualDiode Specifics Send and Receive Owl Cards installed in host computer platforms Send Server Receive Server Create Send and Receive gateways for their respective networks. 22
23 What makes a One-Way Cross-Domain Solution Source Network Destination Network Send Server Receive Server Guard Software Source Platform Destination Platform DualDiode enforces unconditional one-way transfer policy Guard software enforces conditional forward data transfer policy 23
24 CWID Trial 3.27 IIMS, Simplified Multi-Network Architecture includes Unclassified and Secret Networks, and Cross Domain Solutions Secret Network: Surveillance, Analysis, Command, Control Sensor Data, Field Reports, Imagery, Event Detection Malware Scan DualDiode DualDiode Content Scan Declass Tool Filtered Reports, Emergency Response, Situational Awareness, Operational Guidance Unclassified Network 24
25 Low to High Upguard Cross-Domain Solution Additional guard(s) may be placed on high side, if necessary Send Server High Security Destination Network Receive Server Destination Platform Source Platform Malware Scan Guard Software Low Security Source Network Guard software on low side enforces malware-free conditional forward security policy before data transfer using Symantec Scan Engine 25
26 CWID Trial 3.27 IIMS, Simplified Multi-Network Architecture includes Unclassified and Secret Networks, and Cross Domain Solutions Secret Network: Surveillance, Analysis, Command, Control Sensor Data, Field Reports, Imagery, Event Detection Malware Scan DualDiode DualDiode Content Scan Declass Tool Filtered Reports, Emergency Response, Situational Awareness, Operational Guidance Unclassified Network 26
27 High to Low Downguard Cross-Domain Solution High Security Destination Network Source Platform Human Review Content Scan Guard Software Software-assisted human review enforces content restriction conditional forward security policy before document transfer Receive Server Send Server Destination Platform Low Security Source Network 27
28 Trial 3.27 Downguard Details: JWARN, ORMS Downguard Data Review Process Flowchart Human reviewers usmtf file JWARN Declass? Yes Detect dirty words Owl Release Management System (ORMS) No Quarantine Scan report No ORMS Approve? No Quarantine C2PC JWARN Platform Yes 28
29 Case Study 1 Summary: Upguard Data Diode file xfer - malware scan Downguard Data Diode text file xfer - dirty word content scan - multi human review 29
30 Case Study 2 CWID 2007 Trial 1.56 DualDiode, Shirleys Bay, Canada Top Secret Network Secret Network Files only Content Scan Human Review Dual Diode Isolated Network Files only Dual Diode Antivirus scan Unclass Network Streaming Video Dual Diode Data Fusion & Streaming Video 30
31 Top Secret Intelligence Network Trial 1.56 Data Fusion Demonstration Downguard Receive Server Data Source Workstation Secret Data Fusion Network Data Source Workstation Upguard Send Server Upguard Receive Server Data Fusion Workstation Unclass Public Network 31
32 Top Secret Intelligence Network Trial 1.56 Data Fusion Demonstration Downguard Receive Server Data Source Workstation Secret Data Fusion Network Data Source Workstation Upguard Send Server Upguard Receive Server Data Fusion Workstation Unclass Public Network 32
33 Owl Release Management System (ORMS) Trial 1.56 Downguard Data Review Process Flowchart Purifile scan.doc.xls.ppt Filetype check.txt file Other filetypes Disallowed Quarantine Scan report Detect dirty words Other filetypes Allowed: jpeg, pdf Reviewers Approve? No Human reviewers Yes 33
34 Trial 1.56 Downguard Features Owl Release Management System (ORMS) Features Multiple-human Review and Purifile TM Content Scanning: Deep Content Scanning of Microsoft Office Filetypes.doc,.xls,.ppt Scan results rendered in human-readable report Detects improperly embedded info content not obvious to human reviewer. Examples include: White text on white background Image or text shrunk to line or point 34
35 Top Secret Intelligence Network Trial 1.56 Data Fusion Throughput Throughput limited by Mandatory human review Secret Data Fusion Network High throughput upguard, Fully automated scanning Unclass Public Network 35
36 Trial 1.56 Streaming Video Demonstration Local Source Isolated Peer Network Video Display Destination Workstation Video Source Control Workstation Streaming Video Data Source Upguard Receive Server DVD player Unclass Network 36
37 Trial 1.56 Streaming Video Demonstration Remote Source Isolated Peer Network Video Display Destination Workstation Video Source Control Workstation Streaming Video Data Source Upguard Receive Server DVD player Unclass Network 37
38 Case Study 2 Summary: Upguard Data Diode file xfer - malware scan Downguard Data Diode document xfer - deep content scan - multi human review Peer-to-peer streaming video - multiple concurrent streams 38
39 Case Study 3 CWID Trial 1.56 includes three virtual trials that use Data Diode as an enterprise service: Geolap (Shirleys Bay, Canada) - Large GIS image files - populated GIS directory structures New Zealand - Low bandwidth TCP file transfers (no FTP) SPAWAR (US Navy, San Diego, CA) - integration with Sharepoint web services 39
40 CWID Trial 1.56 Global Reach Trial 1.56 Data Transfer Paths 40
41 CWID Trial 1.56 Virtual Players, All Top Secret Network RFTS Content Scan Human Review RFTS SPAWAR Workstations, San Diego Sharepoint Core Services, Virginia 2 Geolap destination 1 WinXP RFTS Win2003 server 2 1 RFTS 1 WinXP JIIFC Data Fusion Platform, mapped drives 2 5 NZ data source Sharepoint Server 2 Win2003 server 3 RFTS Secret Network RFTS CFMCC N6 2 SPAWAR Shared Directory 4 Geolap Source Win2003 Server 4 Antivirus Scan RFTS WinXP JIIFC Source Platform, mapped drive NZ data fusion destination Win2003 Server 7 Unclass Network SD CMOC COMMO Sharepoint Server 4 SPAWAR Shared Directory DVD player Win2003 server 8 WinXP JIIFC 9 Video Display workstation RFTS NZ data source Shirleys Bay Isolated Network New Zealand Workstations 41
42 CWID Trial 1.56 Enterprise Deployment Top Secret Network Human Review Content Scan NZ data source Secret Network CFMCC N6 Sharepoint Server Isolated Network NZ data fusion destination CMOC COMMO Sharepoint Server Malware Scan NZ data source Unclassified Network Western US Eastern US Canada NZ Low Bandwidth VPN New Zealand 42
43 Virtual Trial New Zealand Detail New Zealand Connectivity via TCP File Transfer no FTP services Top Secret Network Top Secret Network Files only Content Scan Human Review Dual Diode RFTS Receive RFTS Send RFTS Receive NZ Data Source NZ Data Destination Files only Dual Diode Antivirus scan RFTS Send RFTS Receive NZ Low Bandwidth VPN Secret Fusion Destination Network RFTS Send NZ Data Source Unclass Network Unclass Network 43
44 Virtual Trial 1.56, SPAWAR Detail SPAWAR Role Player access to DualDiode via Sharepoint Web Portal Users located in San Diego, CA Sharepoint Web Portal Windows Server Platform Folder Trial1.56 SPAWAR Shared folder Sharepoint Servers located in VA Sharepoint Web Portal Windows Server Platform Folder Trial1.56 SPAWAR Shared folder Secret Network Data Diode Servers located in Shirleys Bay, Canada SPAWAR Antivirus SPAWAR DualDiode Receive server DualDiode Send Server Unclass Network 44
45 Case Study 3 Summary: Enterprise Cross Domain Xfer Service Upguard file xfer - malware scan - TCP file xfer service (RFTS, no FTP) - Sharepoint web server GUI Downguard file xfer - content scan - multi human review 45
46 CWID 2007 Results - Proven Success! Data Diode Cross Domain Connectivity Large files and directory structures 13 parallel MPEG video streams Low bandwidth VPN operation Sharepoint integration Easy to use 100% transfer success 46
47 Summary Three CWID 2007 case studies were presented: 1. Trial 3.27 IIMS Sensors, Command, Control 2. Trial 1.56 DualDiode - Data Fusion, Video Stream 3. Enterprise Scale Data Diode Deployment Conclusions Data Diodes provide reliable real-time connectivity while maintaining high levels of network security. Data Diode capability may be scaled upward to provide Enterprise-Scale Cross Domain Solutions 47
48 owlcti.com Thank You! Any Questions?
49 Special Notes on Cross Domain Solutions Unified Cross Domain Management Office (UCDMO) sets Cross-Domain security policies across DNI, DoD New data sharing paradigms based on Risk Management rather than data confidentiality UCDMO maintains a baseline list of approved Cross Domain Solutions The UCDMO baseline list includes TSABI-OWT, a Data Diode Cross Domain Solution 49
50 TSABI-OWT Product Graphic Owl Dual Diode Source Data GOTS Software GOTS Software Destination Data Network Boundary 50
51 Cross-Domain Upguard File Transfer Solution Source Network Destination Network Owl RFTS Client Owl RFTS Server Quarantine Owl RFTS Client Owl RFTS Server Source directory Scan directory Owl DFTS Owl DFTS Receive directory Destination directory User Source Antivirus scan User Destination Send Server Receive Server Antivirus scan is an example of a conditional forward data transfer policy in series with unconditional one-way transfer policy 51
52 Additional Security Requirements Satisfied by adding Security Appliances Secret Destination Network Intrusion Detection Appliance Antivirus software Owl DFTS Owl DFTS Send Server Receive Server Firewall Appliance DMZ Unclass Source Network 52
53 toll free
54 DualDiode Technology Send Only & Receive Only NIC pair, 155 Mbps 54
55 DualDiode System Installation Send and Receive Owl Cards installed in host computer platforms Send Server Receive Server Create Send and Receive gateways for their respective networks. 55
Deep Security Vulnerability Protection Summary
Deep Security Vulnerability Protection Summary Trend Micro, Incorporated This documents outlines the process behind rules creation and answers common questions about vulnerability coverage for Deep Security
Accessing and sending data securely across security domains
In this White Paper Connectivity is good. Secure connectivity is essential. This white paper by Thales UK explains how Thales Gateway Services protect the exchange of data across security domains. It discusses
Secure Software Update Service (SSUS ) White Paper
White Paper Secure Software Update Service (SSUS ) White Paper Author: Document Version: r03c Jeffrey Menoher Publish Date: 9/6/2013 Secure. Reliable. Fast Problem Many software updates, including operating
SonicWALL Clean VPN. Protect applications with granular access control based on user identity and device identity/integrity
SSL-VPN Combined With Network Security Introducing A popular feature of the SonicWALL Aventail SSL VPN appliances is called End Point Control (EPC). This allows the administrator to define specific criteria
Customer Service Description Next Generation Network Firewall
Customer Service Description Next Generation Network Firewall Interoute, Walbrook Building, 195 Marsh Wall, London, E14 9SG, UK Tel: +800 4683 7681 Email: [email protected] Interoute Communications Limited
Meeting the Cybersecurity Standards of ANSI/ISA 62443 with Data Diodes
Meeting the Cybersecurity Standards of ANSI/ISA 62443 with Data Diodes Dennis Lanahan June 1, 2015 Securing the convergence of OT and IT with ST 1 Introduction to Owl US US Owned and & Operated Product
Firewalls. Securing Networks. Chapter 3 Part 1 of 4 CA M S Mehta, FCA
Firewalls Securing Networks Chapter 3 Part 1 of 4 CA M S Mehta, FCA 1 Firewalls Learning Objectives Task Statements 1.3 Recognise function of Telecommunications and Network security including firewalls,..
Chapter 9 Firewalls and Intrusion Prevention Systems
Chapter 9 Firewalls and Intrusion Prevention Systems connectivity is essential However it creates a threat Effective means of protecting LANs Inserted between the premises network and the to establish
10 Strategies to Optimize IT Spending in an Economic Downturn. Wong Kang Yeong, CISA, CISM, CISSP Regional Security Architect, ASEAN
10 Strategies to Optimize IT Spending in an Economic Downturn Wong Kang Yeong, CISA, CISM, CISSP Regional Security Architect, ASEAN Current Economic Landscape 2 Basically you Basically you ve had to throw
Symantec Enterprise Firewalls. From the Internet Thomas Jerry Scott
Symantec Enterprise Firewalls From the Internet Thomas Symantec Firewalls Symantec offers a whole line of firewalls The Symantec Enterprise Firewall, which emerged from the older RAPTOR product We are
Cisco Small Business ISA500 Series Integrated Security Appliances
Q & A Cisco Small Business ISA500 Series Integrated Security Appliances Q. What is the Cisco Small Business ISA500 Series Integrated Security Appliance? A. The Cisco Small Business ISA500 Series Integrated
Implementing Deep-Secure guards in NATO Information Exchange Gateways
Briefing Paper Implementing Deep-Secure guards in NATO Information Exchange Gateways March 2014 NATO Information Exchange Gateways An Information Exchange Gateway (IEG) is a system designed to enable the
Huawei Network Edge Security Solution
Huawei Network Edge Security Huawei Network Edge Security Solution Enterprise Campus Network HUAWEI TECHNOLOGIES CO., LTD. Huawei Network Edge Security Solution Huawei Network Edge Security 1 Overview
Introduction to Endpoint Security
Chapter Introduction to Endpoint Security 1 This chapter provides an overview of Endpoint Security features and concepts. Planning security policies is covered based on enterprise requirements and user
W H I T E P A P E R. Security & Defense Solutions Intelligent Convergence with EdgeFrontier
W H I T E P A P E R Security & Defense Solutions Intelligent Convergence with EdgeFrontier Contents 1. Introduction... 2 2. The Need for Intelligent Convergence... 3 2.1 Security Convergence with EdgeFrontier...
Security Systems EMERGENCY MANAGEMENT. In security you cannot choose the second best option. indracompany.com
Security Systems EMERGENCY MANAGEMENT In security you cannot choose the second best option indracompany.com EMERGENCY MANAGEMENT EMERGENCY MANAGEMENT EMERGENCY C4i CENTRE Crisis management and preparednesss
ZSCALER EMAIL SECURITY CLOUD FOR LARGE AND MEDIUM ENTERPRISE
The Leader in Cloud Security DATA SHEET ZSCALER EMAIL SECURITY CLOUD FOR LARGE AND MEDIUM ENTERPRISE OVERVIEW Email volume is growing every day. Administrators struggle with a growing number of appliances
KASPERSKY ANTI-MALWARE PROTECTION SYSTEM BE READY FOR WHAT S NEXT. Kaspersky Open Space Security
KASPERSKY ANTI-MALWARE PROTECTION SYSTEM BE READY FOR WHAT S NEXT Open Space Security Cyber-attacks are real. Today alone, Lab technology prevented nearly 3 million of them aimed at our customers worldwide.
Getting started. Symantec AntiVirus Corporate Edition 8.1 for Workstations and Network Servers
Getting started Symantec AntiVirus Corporate Edition 8.1 for Workstations and Network Servers Copyright 2003 Symantec Corporation. All rights reserved. Printed in the U.S.A. 03/03 Symantec and the Symantec
Cisco ASA 5500 Series Firewall Edition for the Enterprise
Solution Overview Cisco ASA 5500 Series Firewall Edition for the Enterprise Threats to today s networks continue to grow, with attacks coming from both outside and within corporate networks. These threats
Cisco ASA 5500 Series Firewall Edition for the Enterprise
Взято с сайта www.wit.ru Solution Overview Cisco ASA 5500 Series Firewall Edition for the Enterprise Threats to today s networks continue to grow, with attacks coming from both outside and within corporate
Symantec Endpoint Protection 11.0 Architecture, Sizing, and Performance Recommendations
Symantec Endpoint Protection 11.0 Architecture, Sizing, and Performance Recommendations Technical Product Management Team Endpoint Security Copyright 2007 All Rights Reserved Revision 6 Introduction This
Rapid Response, Total Support. Homeland Security Solutions that Keep America Safe
Rapid Response, Total Support Homeland Security Solutions that Keep America Safe Solutions on the Front Lines of Homeland Security For the homeland security community, there are no second chances. Critical
Clearswift SECURE File Gateway
Security solutions for a changing world You wouldn t leave your front door unlocked if you were going out for the day, so why do the same with your business? In today s rapidly evolving business environment,
Software. Quidview 56 CAMS 57. XLog NTAS 58
Software Quidview 56 CAMS 57 XLog NTAS 58 55 Quidview Quidview Network Management System Quidview network management software is a suite of scalable tools for simplifying the network management and maintenance.
Network Security Forensics
Network Security Forensics As hacking and security threats grow in complexity and organizations face stringent requirements to document access to private data on the network, organizations require a new
Solution Brief: Enterprise Security
Symantec Brightmail Gateway and VMware Solution Brief: Enterprise Security Symantec Brightmail Gateway and VMware Contents Corporate overview......................................................................................
Symantec Brightmail Gateway Real-time protection backed by the largest investment in security infrastructure
Real-time protection backed by the largest investment in security infrastructure Overview delivers inbound and outbound messaging security, with effective and accurate real-time antispam and antivirus
SANS Top 20 Critical Controls for Effective Cyber Defense
WHITEPAPER SANS Top 20 Critical Controls for Cyber Defense SANS Top 20 Critical Controls for Effective Cyber Defense JANUARY 2014 SANS Top 20 Critical Controls for Effective Cyber Defense Summary In a
Astaro Gateway Software Applications
Astaro Overview Astaro Products - Astaro Security Gateway - Astaro Web Gateway - Astaro Mail Gateway - Astaro Command Center - Astaro Report Manager Astaro Gateway Software Applications - Network Security
Solution Review: Siemens Enterprise Communications OpenScape Session Border Controller
Solution Review: Siemens Enterprise Communications OpenScape Session Border Controller Russell Bennett UC Insights www.ucinsights.com [email protected] Introduction Those familiar with unified communications
FortiMail Email Filtering Course 221-v2.2 Course Overview
FortiMail Email Filtering Course 221-v2.2 Course Overview FortiMail Email Filtering is a 2-day instructor-led course with comprehensive hands-on labs to provide you with the skills needed to design, configure,
How To Secure Your System From Cyber Attacks
TM DeltaV Cyber Security Solutions A Guide to Securing Your Process A long history of cyber security In pioneering the use of commercial off-the-shelf technology in process control, the DeltaV digital
custom hosting for how you do business
custom hosting for how you do business 24775 League Island Boulevard Philadelphia PA 19112 gibraltarit.com 866.410.4427 Gibraltar s replicated cloud architecture and PCI/HIPAA compliant data centers provide
Driving Company Security is Challenging. Centralized Management Makes it Simple.
Driving Company Security is Challenging. Centralized Management Makes it Simple. Overview - P3 Security Threats, Downtime and High Costs - P3 Threats to Company Security and Profitability - P4 A Revolutionary
Security Administration R77
Security Administration R77 Validate your skills on the GAiA operating system Check Point Security Administration R77 provides an understanding of the basic concepts and skills necessary to configure Check
Benefits. Product Overview. There is nothing more important than our customers. DATASHEET
DATASHEET Security Information & Event Manager (SIEM) Compliance through Security Information and Event Management, Log Management, and Network Behavioral Analysis Product Overview Delivers fast, accurate
INCIDENT RESPONSE CHECKLIST
INCIDENT RESPONSE CHECKLIST The purpose of this checklist is to provide clients of Kivu Consulting, Inc. with guidance in the initial stages of an actual or possible data breach. Clients are encouraged
North American Electric Reliability Corporation (NERC) Cyber Security Standard
North American Electric Reliability Corporation (NERC) Cyber Security Standard Symantec Managed Security Services Support for CIP Compliance Overviewview The North American Electric Reliability Corporation
Protecting your information
Protecting your information Secure your information Each year, governments, businesses and institutions suffer untold losses through not protecting their information. A UK government survey* puts the cost
Cisco & Big Data Security
Cisco & Big Data Security 巨 量 資 料 的 傳 輸 保 護 Joey Kuo Borderless Networks Manager [email protected] The any-to-any world and the Internet of Everything is an evolution in connectivity and collaboration that
Glasnost or Tyranny? You Can Have Secure and Open Networks!
AT&T is a proud sponsor of StaySafe Online Glasnost or Tyranny? You Can Have Secure and Open Networks! Steven Hurst CISSP Director - AT&T Security Services and Technology AT&T Chief Security Office 2009
Replacing Microsoft Forefront Threat Management Gateway with F5 BIG-IP. Dennis de Leest Sr. Systems Engineer Netherlands
Replacing Microsoft Forefront Threat Management Gateway with F5 BIG-IP Dennis de Leest Sr. Systems Engineer Netherlands Microsoft Forefront Threat Management Gateway (TMG) Microsoft Forefront Threat Management
Security appliances with integrated switch- Even more secure and more cost effective
Security appliances with integrated switch- Even more secure and more cost effective There is currently a great deal of discussion about the issue of cyber security and its optimisation. But not many businesses
CROSS DOMAIN SOLUTIONS
Owl Computing Technologies, Inc. CROSS DOMAIN SOLUTIONS Securing Digital Assets of the US Government, DoD, and Intelligence Community 38A Grove St, Ste 101 Ridgefield, CT 06877, USA Toll Free: 866-695-3387
Unified Threat Management, Managed Security, and the Cloud Services Model
Unified Threat Management, Managed Security, and the Cloud Services Model Kurtis E. Minder CISSP Global Account Manager - Service Provider Group Fortinet, Inc. Introduction Kurtis E. Minder, Technical
Providing On-Demand Situational Awareness
ITT Exelis Geospatial Intelligence Solutions Providing On-Demand Situational Awareness Use of U.S. Department of Defense (DoD) and U.S. Army imagery in this brochure does not constitute or imply DoD or
Next-Generation Firewalls: Critical to SMB Network Security
Next-Generation Firewalls: Critical to SMB Network Security Next-Generation Firewalls provide dramatic improvements in protection versus traditional firewalls, particularly in dealing with today s more
MOBILITY & INTERCONNECTIVITY. Features SECURITY OF INFORMATION TECHNOLOGIES
MOBILITY & INTERCONNECTIVITY Features SECURITY OF INFORMATION TECHNOLOGIES Frequent changes to the structure of enterprise workforces mean that many are moving away from the traditional model of a single
XEBHRA: A Virtualized Platform for Cross Domain Information Sharing
2013 DHS S&T/DoD ASD (R&E) CYBER SECURITY SBIR WORKSHOP XEBHRA: A Virtualized Platform for Cross Domain Information Sharing Adventium Labs Charles N. Payne, Jr. July 23, 2013 Company Profile of your company
Trend Micro Cloud App Security for Office 365. October 27, 2015 Trevor Richmond
Trend Micro Cloud App Security for Office 365 October 27, 2015 Trevor Richmond Too many malware incidents >90% Targeted Attacks Start with Email Attackers: Target specific companies or individuals Research
OWL CROSS DOMAIN FORUM
Owl Computing Technologies R WELCOME TO THE 9TH ANNUAL OWL CROSS DOMAIN FORUM MAY 8, 2013 www.owlcti.com AGENDA 0800-1700 Demonstration room exhibits 0800-0900 Continental breakfast 0900-1000 Owl new technology
Benefits. Product Overview. There is nothing more important than our customers. DATASHEET
DATASHEET Security Information & Event Manager (SIEM) Compliance through Security Information and Event Management, Log Management, and Network Behavioral Analysis Product Overview Delivers fast, accurate
Dell SonicWALL Portfolio
Dell SonicWALL Portfolio Jiří Svatuška Presales Consultant Transform Connect Inform Protect Dell SonicWALL network security portfolio Network security Secure mobile access Email security Policy and management
Clean VPN Approach to Secure Remote Access
Clean VPN Approach to Secure Remote Access A clean VPN approach delivers layered defense-in-depth protection for the core elements of business communications. CONTENTS Extending Business Beyond the Perimeter
Information Technology Career Cluster Introduction to Cybersecurity Course Number: 11.48100
Information Technology Career Cluster Introduction to Cybersecurity Course Number: 11.48100 Course Description: Introduction to Cybersecurity is designed to provide students the basic concepts and terminology
Building A Secure Microsoft Exchange Continuity Appliance
Building A Secure Microsoft Exchange Continuity Appliance Teneros, Inc. 215 Castro Street, 3rd Floor Mountain View, California 94041-1203 USA p 650.641.7400 f 650.641.7401 ON AVAILABLE ACCESSIBLE Building
On and off premises technologies Which is best for you?
On and off premises technologies Which is best for you? We don t mind what you buy, as long as it is YELLOW! Warren Sealey and Paul-Christian Garpe On Premises or in the cloud? 1 Agenda Why Symantec? Email
8. Firewall Design & Implementation
DMZ Networks The most common firewall environment implementation is known as a DMZ, or DeMilitarized Zone network. A DMZ network is created out of a network connecting two firewalls; i.e., when two or
Guidance Regarding Skype and Other P2P VoIP Solutions
Guidance Regarding Skype and Other P2P VoIP Solutions Ver. 1.1 June 2012 Guidance Regarding Skype and Other P2P VoIP Solutions Scope This paper relates to the use of peer-to-peer (P2P) VoIP protocols,
Clean VPN Approach to Secure Remote Access for the SMB
Clean VPN Approach to Secure Remote Access for the SMB A clean VPN approach delivers layered defense-in-depth protection for the core elements of business communications. CONTENTS Extending Business Beyond
UNIFIED PERFORMANCE MANAGEMENT
UNIFIED PERFORMANCE MANAGEMENT VISIBILITY CONTROL OPTIMIZATION COMPLETE WAN OPTIMIZATION Increase the speed and efficiency of your wide area network. Exinda s Unified Performance Management (UPM) solution
Data Fusion Centers. Transforming Public Safety Information into Actionable Knowledge
Data Fusion Centers Transforming Public Safety Information into Actionable Knowledge Defining Geospatial Data Fusion Homeland security relies on fusion the ability to capture and analyze data from multiple
Palo Alto Networks. October 6
Palo Alto Networks October 6 Agenda Malware Trends by the numbers Protect Locally Share Globally Delivery methods 21.5% ~14% OF MALWARE HAS BEEN DELIVERED OVER APPS OTHER THAN WEB AND EMAIL IN 2015 8.2%
Ovation Security Center Data Sheet
Features Scans for vulnerabilities Discovers assets Deploys security patches transparently Allows only white-listed applications to run in workstations Provides virus protection for Ovation Windows workstations
CASSIDIAN CYBERSECURITY SECURITY OPERATIONS CENTRE SERVICES
CASSIDIAN CYBERSECURITY SECURITY OPERATIONS CENTRE SERVICES PROTECTIVE MONITORING SERVICE In a world where cyber threats are emerging daily, often from unknown sources, information security is something
Securing enterprise collaboration through email and file sharing on a unified platform
Axway MailGate SC Securing enterprise collaboration through email and file sharing on a unified platform Email is the primary collaboration tool employees use to share information and send large files.
Data Sheet: Endpoint Security Symantec Protection Suite Enterprise Edition Trusted protection for endpoints and messaging environments
Trusted protection for endpoints and messaging environments Overview Symantec Protection Suite Enterprise Edition creates a protected endpoint and messaging environment that is secure against today s complex
Game changing Technology für Ihre Kunden. Thomas Bürgis System Engineering Manager CEE
Game changing Technology für Ihre Kunden Thomas Bürgis System Engineering Manager CEE Threats have evolved traditional firewalls & IPS have not Protection centered around ports & protocols Expensive to
Getting started. Symantec AntiVirus Corporate Edition. About Symantec AntiVirus. How to get started
Getting started Symantec AntiVirus Corporate Edition Copyright 2004 Symantec Corporation. All rights reserved. Printed in the U.S.A. 03/04 10223881 Symantec and the Symantec logo are U.S. registered trademarks
RSA SecurID Ready Implementation Guide
RSA SecurID Ready Implementation Guide Partner Information Last Modified: December 18, 2006 Product Information Partner Name Microsoft Web Site http://www.microsoft.com/isaserver Product Name Internet
Industrial Security for Process Automation
Industrial Security for Process Automation SPACe 2012 Siemens Process Automation Conference Why is Industrial Security so important? Industrial security is all about protecting automation systems and critical
Cisco Virtualization Experience Infrastructure: Secure the Virtual Desktop
White Paper Cisco Virtualization Experience Infrastructure: Secure the Virtual Desktop What You Will Learn Cisco Virtualization Experience Infrastructure (VXI) delivers a service-optimized desktop virtualization
Comparison of Firewall, Intrusion Prevention and Antivirus Technologies
White Paper Comparison of Firewall, Intrusion Prevention and Antivirus Technologies How each protects the network Juan Pablo Pereira Technical Marketing Manager Juniper Networks, Inc. 1194 North Mathilda
Small and Midsize Business Protection Guide
P r o t e c t i o n G u i d e : C l o s e t h e P r o t e c t i o n G a p Small and Midsize Business Protection Guide Close the protection gap and safeguard your business future Confidence in a connected
Secure Access Complete Visibility
PACKET CAPTURE APPLIANCE PACKET CAPTURE APPLIANCE PACKET CAPTURE APPLIANCE PACKET CAPTURE APPLIANCE Intrusion Detection Switch TAP Data Recorder VoIP Analyzer Switch Secure Access Complete Visibility Web
Cyan Networks Secure Web vs. Websense Security Gateway Battle card
URL Filtering CYAN Secure Web Database - over 30 million web sites organized into 31 categories updated daily, periodically refreshing the data and removing expired domains Updates of the URL database
Fortigate Features & Demo
& Demo Prepared and Presented by: Georges Nassif Technical Manager Triple C Firewall Antivirus IPS Web Filtering AntiSpam Application Control DLP Client Reputation (cont d) Traffic Shaping IPSEC VPN SSL
Reliable, Repeatable, Measurable, Affordable
Reliable, Repeatable, Measurable, Affordable Defense-in-Depth Across Your Cyber Security Life-Cycle Faced with today s intensifying threat environment, where do you turn for cyber security answers you
Securing the Small Business Network. Keeping up with the changing threat landscape
Securing the Small Business Network Keeping up with the changing threat landscape Table of Contents Securing the Small Business Network 1 UTM: Keeping up with the Changing 2 Threat Landscape RFDPI: Not
What to Look for When Evaluating Next-Generation Firewalls
What to Look for When Evaluating Next-Generation Firewalls Using independent tests to compare performance, cost and functionality Table of Contents Why Use Independent Tests in Evaluations?... 3 What to
Chief Review Services REVIEW OF DND/CF INFORMATION SECURITY. October 2002 7050-7 (CRS) Canada
REVIEW OF DND/CF INFORMATION SECURITY October 2002 7050-7 (CRS) Canada TABLE OF CONTENTS OVERVIEW... 1 INTRODUCTION... 1 Comparative Assessment of the DND/CF Information Security Program... 1 RECOMMENDATIONS...
INFORMATION PROTECTED
INFORMATION PROTECTED Symantec Protection Suite Effective, comprehensive threat protection Safeguarding your organization s business-critical assets in today s ever-changing threat landscape has never
Getting started. Symantec AntiVirus Corporate Edition. About Symantec AntiVirus. How to get started
Getting started Corporate Edition Copyright 2005 Corporation. All rights reserved. Printed in the U.S.A. 03/05 PN: 10362873 and the logo are U.S. registered trademarks of Corporation. is a trademark of
The Protection Mission a constant endeavor
a constant endeavor The IT Protection Mission a constant endeavor As businesses become more and more dependent on IT, IT must face a higher bar for preparedness Cyber preparedness is the process of ensuring
Cyber Exercises, Small and Large
First International Conference on Cyber Crisis Cooperation: Cyber Exercises 27 June 2012 Cyber Exercises, Small and Large Commander Mike Bilzor Computer Science Department U.S. Naval Academy Annpolis,
PAVING THE PATH TO THE ELIMINATION OF THE TRADITIONAL DMZ
PAVING THE PATH TO THE ELIMINATION A RSACCESS WHITE PAPER 1 The Traditional Role of DMZ 2 The Challenges of today s DMZ deployments 2.1 Ensuring the Security of Application and Data Located in the DMZ
Getting Started with Symantec Endpoint Protection
Getting Started with Symantec Endpoint Protection 20983668 Getting Started with Symantec Endpoint Protection The software described in this book is furnished under a license agreement and may be used only
Securing enterprise collaboration through email and file sharing on a unified platform
Axway MailGate SC Securing enterprise collaboration through email and file sharing on a unified platform Email is the primary collaboration tool employees use to share information and send large files.
How Traditional Firewalls Fail Today s Networks And Why Next-Generation Firewalls Will Prevail
How Fail Today s Networks And Why Will Prevail Why your current firewall may be jeopardizing your security, and how you can counter today s threats, manage web 2.0 apps and enforce acceptable-use policies.
BAE Systems PCI Essentail. PCI Requirements Coverage Summary Table
BAE Systems PCI Essentail PCI Requirements Coverage Summary Table Introduction BAE Systems PCI Essential solution can help your company significantly reduce the costs and complexity of meeting PCI compliance
How To Understand Your Potential Customer Opportunity Profile (Cop) From A Profit Share To A Profit Profit (For A Profit)
IT Services Qualifying & COP Form Training April 2011 1 Agenda Purpose for the COP Form & How it Should Be Used Customer Opportunity Profile (COP) Form Identifying Virtualization Opportunities Identifying
SonicWALL Unified Threat Management. Alvin Mann April 2009
SonicWALL Unified Threat Management Alvin Mann April 2009 Agenda Who is SonicWALL? Networking Drivers & Trends SonicWALL Unified Threat Management (UTM) Next Generation Protection SonicWALL CONFIDENTIAL
City of Coral Gables
City of Coral Gables Information Technology Department IT TECHNICAL SUPPORT DIVISION Infrastructure Upgrade Plan Systems, Applications, Network, and Telecommunications Infrastructure OVERVIEW Last revision:
Networking for Caribbean Development
Networking for Caribbean Development BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n o g. o r g N E T W O R K I N G F O R C A R I B B E A N D E V E L O P M E N T BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n